CVE-2026-88011

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Authenticated.User survives ForwardAuth replacement and underscoreHeadersStrategy because Go treats it as distinct from X-Authenticated-User while normalization-prone CGI, WSGI, PHP, and NGINX backends collapse both names. A backend can consequently consume the client value instead of the identity Traefik asserted, allowing identity spoofing for any header managed by Traefik. The aliasHeadersStrategy protection is disabled by default and must be configured as delete or reject. The mitigation is available in 2.11.56 and 3.7.12.

• CWE-290

• https://github.com/traefik/traefik/commit/0331801c72329e0eaeb850e53ccce87c57fbecf8
• https://github.com/traefik/traefik/pull/13720
• https://github.com/traefik/traefik/releases/tag/v2.11.56
• https://github.com/traefik/traefik/releases/tag/v3.7.12
• https://github.com/traefik/traefik/security/advisories/GHSA-rf44-j88r-hh8c

Published

Sep 10, 2026

Last Modified

Sep 10, 2026

Status

Awaiting Analysis

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88005Open WebUI is an extensible, feature-rich, and user-friendly…6.5
• CVE-2026-88006Open WebUI is an extensible, feature-rich, and user-friendly…6.5
• CVE-2026-88007Traefik is an open source HTTP reverse proxy and load balanc…9.1
• CVE-2026-88008Traefik is an open source HTTP reverse proxy and load balanc…7
• CVE-2026-88009Traefik is an open source HTTP reverse proxy and load balanc…8.8
• CVE-2026-8801Path equivalence: vulnerability in Progress MOVEit Transfer …9.8
• CVE-2026-88012Traefik is an open source HTTP reverse proxy and load balanc…5.3
• CVE-2026-88013rclone is a command-line program to sync files and directori…3.7
• CVE-2026-88014rclone is a command-line program to sync files and directori…6.3
• CVE-2026-88015rclone is a command-line program to sync files and directori…5.3
• CVE-2026-88016rclone is a command-line program to sync files and directori…7.1
• CVE-2026-88017rclone is a command-line program to sync files and directori…7.3